https://www.eff.org/deeplinks/2015/04/effs-updated-ssl-configuration